Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/740f7067-30ca-3ff5-91af-76d38e7ef6af.roa
File: 740f7067-30ca-3ff5-91af-76d38e7ef6af.roa (raw, json)
Hash identifier: DlT+47WnchwpQH+oXgwKn/l4hU+7Oc1YTx/9Ofcrj74=
Subject key identifier: 40:02:78:20:D7:11:DB:0A:D5:32:3B:B0:72:A1:92:4C:29:ED:D7:4E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858498769C7204BC35CC6C1059940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/740f7067-30ca-3ff5-91af-76d38e7ef6af.roa
Signing time: Tue 15 Apr 2025 01:00:47 +0000
ROA not before: Tue 15 Apr 2025 01:00:47 +0000
ROA not after: Mon 14 Jul 2025 01:00:47 +0000
asID: 396611
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Apr 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:87:69:c7:20:4b:c3:5c:c6:c1:05:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 15 01:00:47 2025 GMT
Not After : Jul 14 01:00:47 2025 GMT
Subject: CN=db3a029c-dbcd-4fad-b3e3-657275392429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dd:69:f1:2e:0a:e4:81:f7:4e:c7:8d:2b:54:
95:9f:7e:af:bc:bf:db:f6:72:f2:be:a0:12:bf:ea:
2a:d8:20:70:f8:b3:60:e3:ac:b8:1a:50:b5:e6:e2:
32:0c:db:cf:0e:8e:5d:8c:0f:ba:c1:ad:c5:52:17:
67:85:58:b3:d4:e1:d9:cc:1e:dd:a5:87:e8:e7:c5:
e9:2c:ce:0a:91:75:10:8a:55:a0:ad:50:27:3f:b1:
81:2c:3b:75:16:09:05:da:23:7f:7b:07:3a:96:02:
fd:3d:66:b1:38:8e:80:d1:09:3e:23:cb:f2:2f:3e:
9d:2f:d1:24:f2:02:6a:61:7b:25:60:81:af:61:f4:
c4:80:66:72:58:dc:96:8d:d6:01:1a:d8:aa:b8:58:
d1:20:6c:50:e2:0d:75:f5:98:9b:2f:3e:be:f5:09:
f4:7e:2d:e2:8b:3d:58:3f:59:e6:99:a2:f4:4c:f9:
ab:e1:d3:5a:fe:70:f3:c7:3e:c2:84:e2:e8:e2:79:
8a:a4:29:e7:0e:be:40:06:32:49:c3:f5:e7:68:fd:
e7:ad:57:2b:ff:15:5a:22:14:af:ce:75:3a:5b:26:
04:bb:c1:f4:c8:b2:f7:e7:1f:14:8a:ce:cc:72:ce:
9d:58:ec:e6:ff:9e:d1:db:d1:9b:c0:32:2d:bc:63:
28:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:02:78:20:D7:11:DB:0A:D5:32:3B:B0:72:A1:92:4C:29:ED:D7:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/740f7067-30ca-3ff5-91af-76d38e7ef6af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:61:6d:03:43:ef:30:27:27:1f:b6:e3:a8:09:5f:7f:59:fb:
f4:cc:64:0a:fa:75:b3:6c:56:ee:cd:2a:46:a0:25:62:46:51:
67:10:8d:01:b6:0f:ab:cd:01:e6:93:9d:8c:db:7e:6c:67:40:
06:d3:d7:6e:2f:60:ec:c7:28:b6:2b:b2:22:00:35:15:3d:46:
19:fa:f9:c2:a3:49:01:b6:c3:c0:66:7c:08:29:34:43:3f:3b:
0a:54:f8:53:5d:b9:4a:96:68:2e:67:33:0d:f3:59:bc:b1:3f:
d2:30:09:d1:10:16:42:f1:e9:36:70:54:ed:3a:07:37:39:86:
36:3a:5c:1d:44:88:01:e2:38:c2:52:be:43:00:bc:ea:c2:22:
b8:c3:30:a6:99:7a:15:9b:42:40:18:5a:2b:a7:51:db:5b:9d:
41:c8:a3:97:43:a0:b7:c6:53:3c:a0:f7:2f:05:4d:c0:91:62:
21:ab:83:95:00:95:01:dc:71:05:ed:7d:29:ca:64:b9:d2:1d:
34:1c:22:87:13:1f:05:e9:7e:66:dc:0e:22:20:51:62:3b:c0:
36:1d:6f:de:0b:97:0b:58:fa:42:df:ff:f5:25:8e:6a:b8:9d:
66:6d:7d:ba:4d:6b:f9:31:f2:bc:69:83:db:71:97:c0:df:97:
50:07:52:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:06:48 2025 by rpki-client